Re: Firefox addon signing

On Wed, Aug 26, 2015 at 05:53:36PM +0200, drago01 wrote:
> A better solution would be to add a mechanism that allows you to use
> your own signing keys.
> That way you have both 1) install self built extensions and 2) the
> added security.
..and (3) a way for malware to install its own key, rendering (2) moot

that would imply that malware running as root and then you have already
lost the whole game - pretty sure nobody meant "your own signing keys"
writeable by the user firefox is running